Deftone1 Blog Spot: Computer Spyware 101 , what's about it and what can we do?

What is spyware?

There is an ongoing debate and confusion about the definition of spyware. The term spyware has been used broadly and narrowly.

In its broader sense, spyware refers to a variety of potentially unwanted technologies. These technologies can be defined as,

Technologies implemented in ways that impair users' control over:

collection, use, and distribution of their personal information.
material changes that affect their desktop experience, privacy, or system security; or
use of their system resources

These are items that users will want to be informed about, and which they should be able to easily remove or disable.

In its narrower sense, spyware is a term for executable applications, deployed without adequate notice, consent, or control for the user that track and report the user's computer or the user's activities, including collecting and disclosing personal information.

What are the kinds of technologies that spyware might use, and what do these technologies do?

Technologies that spyware might use include:

Tracking Technologies that monitor user behaviour or gather personal information about the user.
Advertising Display Technologies that display advertising content.
Remote Control Technologies that allow remote access or control of computer systems.
Dialing Technologies that make calls or access services through a modem or Internet connection.
System Modifying Technologies that modify system and change user's browser and desktop experience.
Security Analysis Technologies used by a computer user to analyze or circumvent security protections.
Automatic Download Technologies that download and install software without user interaction.

These technologies are valid and not considered spyware if all of the following three requirements are met: adequate notice, consent, and control. Currently, there is a debate as to what these three elements should entail. However, at the minimum, adequate notice should include notice written in a clear language that describes all the software that will be installed and their functions. Consent means that the user has assented to the notice, by clicking "I agree" to the notice or through some other affirmative action. Control means that the user can start, stop, or uninstall the software when the user pleases.

How does spyware typically get on my personal computer?

Different types of spyware get into your computer in different ways. These ways include,

Hackers placing spyware on your computer;
Drive-by downloads whereby you simply visit a website and spyware is downloaded without your consent and knowledge. The spyware is written into the site's code and thus, exploits known security holes.
Installing freeware/shareware, such as screen savers or games, that bundles spyware applications during installation of the main program.
Emails where there is an attachment to an email message, a hyperlink in an email message, or in the email communication itself if it is in HTML format; and
Clicking on a popup ad.